dimitar / Cerno / 25ede36058e1e71e6e2a22f682ca72af829633be

76%

Build Type

push

github

Committed by dimitar

Commit Message

Harden codebase with defense-in-depth security measures

Replace :os.cmd shell execution with System.cmd (no shell, no temp files),
add file size limits (1MB), path validation with symlink rejection, query
batch caps (5k-10k), TaskSupervisor max_children, accumulation cooldown,
improved ETS cache eviction, and API error sanitization. All 186 tests pass.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Run Details

41 of 79 new or added lines in 11 files covered. (51.9%)

2 existing lines in 1 file now uncovered.

775 of 1086 relevant lines covered (71.36%)

635.85 hits per line